5.3. Groups in Active Directory
Beyond OUs, the next important collective container you need to pay attention to is another you are readily familiar with, Active Directory groups. As you know, Active Directory groups are divided into two types: security and distribution. Distribution groups, for the purpose of this chapter, are mostly beyond the scope of discussion because they are mainly used as a convention to send email through applications, such as Microsoft Exchange. They can't take any permissions, and you can't assign them group policies.
Security groups, however, are not capable of directly receiving Group Policy, but they can control access to network resources and filter Group Policy settings, as well as set permissions. This can get ...
Get MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
